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To beat PNS attack, decoy state quantum key distribution (QKD) based on coherent state has 
been studied widely. We present a decoy state QKD protocol with modified coherent state (MCS). 
By destruction quantum interference, MCS with fewer multi-photon events can be get, which may 
improve key bit rate and security distance of QKD. Through numerical simulation, we show about 
2-dB increment on security distance for BB84 protocol. 
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I. INTRODUCTION 



Quantum Key Distribution (QKD) 0, 

combin- 
ing quantum mechanics and conventional cryptography, 
allows two distant peers (Alice and Bob) share secret 
string of bits, called key. Any eavesdropping attempt 
to QKD process will introduce high bit error rate of 
the key. By comparing part of the key, Alice and Bob 
can catch any eavesdropping attempt. However, most 
of QKD protocols, such as BB84, needs single photon 
source which is not practical forpresent technology. Usu- 
ally, real-file QKD set-ups 0, H E 0, use attenuated 
laser pulses (weak coherent states) instead. It means the 
laser source is equivalent to a laser source that emits n- 
photon state |n) with probability P n — ^-e^, where jj, 
is average photon number. This photon number Pois- 
son distribution stems from the coherent state \^fjle l9 ) of 
laser pulse. Therefore, a few multi-photon events in the 
laser pulses emitted from Alice open the door of Photon- 
Number-Splitting attack (PNS attack) [|, 0, 03 which 
makes the whole QKD process insecure. Fortunately, de- 
coy state QKD theory [H M, Q ES SI , as a good solu- 
tion to beat PNS attack, has been proposed. And some 



QKD is to calculate the lower bound of counting rate of 
single photon pulses (Sf) and upper bound of quantum 
bit error rate (QBER) of bits generated by single photon 
pulses (ej 7 ). The tighter these bounds are given; longer 
distance and higher key bit rate may be acquired. So a 
simple question is how we can increase key bit rate and 
security distance of decoy state QKD. Many methods to 
solve this question have been presented, including more 
decoy states [23[ , nonorthogonal decoy-state method [24| , 
photon-number-resolving method 25j , herald single pho- 
ton source method [26|, |27| . Most of these methods are 
still based on that photon number statistics obeyed Pois- 
son distribution. From derivation of formulas for esti- 
mating and [HI, [l3| , we know that the difference 
between the real value of and origins from the neg- 
ligence of multi-photon counts events. Given some new 
laser sources which have photon-number statistic distri- 
bution with less probability of multi-photon events, a 
more precision estimation of and should be ob- 
tained. 



In fact, it's proven that modified coherent state (MCS) 
with less probability of multi-photon events could im- 
prove the security of QKD by [28| • The scheme of MCS 
generation [29j ] relies on quantum interference to depress 
multi-photon events from the coherent state. We can 
write the MCS by [H : 
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and 



fi = cosh(|C|), v= |^rsinh(|C|), 
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with £ is proportional to the amplitude of the pump field. 

In equation (3), H n represents the nth-order Hermite 
polynomial. When a 2 = ijlv (a 2 = 3/i^), the two-photon 
(three-photon) events have been canceled. In followings, 
we always assume a 2 = cfiv and c is a positive Constance. 
Like conventional decoy state QKD based on coherent 
state, we rewrite the density matrix of the source by in- 
troducing the randomization of phase: 
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Here, we can simply take a, p, and v as real number 
because the value of P n only concerns with the module 
of them. From equation (5), we can conclude that the 
MCS source is a source that emits n-photon state \n) 
with probability P n . 



According to equation (8), estimation of eY is given by: 



v _ {E V ,S V , - 



(12) 



II. DERIVATION 

And now we can deduce formulas for 3-intensity MCS 
decoy QKD and 2-intensity MCS one. Through adjusting 
the intensities of input coherent states \a), we can get 
sources of different v corresponding to different a. Two 
different sources of density matrices p v and p v i could be 
get by this way. The counting rates for the two sources 
{v < v') are given by: 



S v 
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71 = 



P n {v)S n 



S u > =J2 P n(v')Sn 
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where, S n represents counting rate for photon number 
state \n). And quantum bit error rate (QBER) for v' is: 



Now we have get the formulas for calculating Si and 
eY for three-intensity case. In this case Alice randomly 
emits laser pulses from source p„, p v i , or doesn't emit 
anything, then Bob can get counting rates for the three 
case: S u , S v i and So- Then Alice and Bob perform error 
correction and private amplification by S[ and eY calcu- 
lated through equation (11) and (12). The lower bound 
of security key rate is given by [l3(: 



R L = q{-S u ,f{E v ,)H 2 {E v ,) + Pi(*/)Si L [l - H 2 (e¥)}} 

(13) 

with q = i for BB84, f(E v r) is he bidirectional error 
correction efficiency (typically, /(£„/) = 1.2), and H 2 is 
the binary Shannon information function. 

For two-intensity case, Alice randomly emits laser 
pulses from source p v and p v > , then Bob can get counting 
rates for the two cases: S v and S' v . Now, Alice and Bob 
can get Sq firstly, then calculates Si by equation (14) 
with taking Sq as So- The formula for calculating Sq 
can be derived from equation (8) simply it's: 



E V >S U ' = 2J e n P n (v')S n 



(8) 



In which, e„ is QBER for the key bits generated by pho- 
ton number state \n). To derive formulas for S± and eY , 
it's necessary to prove that ^fej Pn{v) ^ P n {v') for all 
ofn^2. 
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From equation (9), we have proven ^gfey P n {v) ^ P n {v')- 
Now we can deduce the formulas for calculating S± : 

S(u') = P (v')S + Px{v')Si + P 2 {v')S 2 + P 3 (u')S 3 + ■■■ 



Combining with equation (6), we have 
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So the formula for two-intensity case is given by: 



= 2{P 2 ( V )Pq{v') - P 2 (v')P { V ))E v ,S v , + P 2 (v')S{v) ~ S{v>) 
{P 2 {v')Pl{u) - P 2 {v)Pi{v'))Pv(v') 

(15) 

To get ef, we can assume Sq = and let So = Sq, 
then from equation (12) eY could be get by: 



E v i S v i 
Pi{v')Si 



(16) 



Equation (11) and (12) are formulas for three-intensity 
protocol, while equation (15) and (16) are for two- 
intensity protocol. These are main results of our deriva- 
tion. 



III. IMPROVEMENT FOR DECOY STATE QKD 

In this section, our purpose is to show MCS's improve- 
ment for decoy state QKD by numerical simulation. We 
consider the case when there is no Eve. And from [l5|: 

e « = ^ + ir"" ' Vn = i - (i - v) n , v = io- fci/lc W, 
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FIG. 1: Couting rate for single-photon laser pulses (Si) verse 
fiber length L. Solid curve: real value of counting rate for 
single-photon laser pulses for no eavesdropping case. Dashed 
curve: Si calculated by traditional decoy state QKD based 
on coherent state. Dotted-dashed curve: Si calculated by 
MCS decoy QKD. 



S n = Sq + t]m where, e^et is the probability that the sur- 
vived photon hits a wrong detector, rj is overall yield and 
r/ n is yield for photon number state |n), k is transmis- 
sion fiber loss Constance, L is fiber length and r/Bot is the 
transmittance loss in Bob's security zone. According to 
0, we set e det = 0.0135, S = 8x 10~ 7 , k = 0.2dB/Km 
for numerical simulation. We simply set r\Bob — 1, be- 
cause our purpose is a comparison not absolute distance. 
These are our parameters and formulas for numerical sim- 
ulation. 



v' for two-intensity case. But for three-intensity case, we 
set the average photon- number of decoy pulses as 0.1 and 
v' or a 1 has optimal value for each point. 
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FIG. 2: security key rate (R L ) verse fiber length L. Solid 
curves: R L with 2-intensity and 3-intensity decoy QKD based 
on coherent state. Dashed curves: R L with 2-intensity and 
3-intensity MCS decoy QKD. 

From Fig2, we see that in two-intensity case about 
3KM increment on security distance could be get by us- 
ing MCS and in three-intensity case 2KM increment is 
given. 



B. To Cancel Three-photon Events 



A. To Cancel Two-photon Events 

Here, we set c = 1 to cancel all two-photon events. 
We cannot use equation (11) and (12) immediately for 
P2 = 0. But, it's easy to see that we can replace P2 as P3, 
and now the equations are available for this case. Firstly, 
we will show the increment of precision for estimating 
Si . Typically, we set a = V0.2, a' = V0.6 as the two 
inputs for the MCS generator. With these inputs, one 
can get two kinds of MCS with v — 0.196 and v' = 0.53. 
Figl shows that real Si , S\ calculated by ordinary decoy 
state QKD based on coherent state (a = V0.2 for decoy 
state and a! = v / (L6 for signal state) and S{" calculated 
by MCS decoy QKD (^=0.196 for the decoy state and 
i/=0.53 for the signal state). From Figl, we can con- 
clude that for two-intensity case MCS decoy state QKD 
is indeed more effective to calculate S^ than traditional 
decoy state QKD based on coherent state. We found that 
in two-intensity protocol the longest length still capable 
of estimating precision increases by 20KM. 

Secondly, we compare the key bit rate R of MCS decoy 
QKD and QKD based on coherent state. To compare 
the two decoy QKD process more fairly, we draw Fig2 in 
which each point has optimal value of a and a' or v and 



Here, we set c = 3 to cancel all two-photon events. And 
equation (11) and (12) can be used immediately. Though 
MCS without three-photon events has more multi-photon 
events than the one without two-photon events, former 
has higher total counting rates and lower QBER, which 
may increase R. The results are drawn in Fig3. In Fig3, 
each point has optimal value of a and a' or v and v' for 
two-intensity case. But for three-intensity case, we set 
the average photon- number of decoy pulses is 0.1 and v' 
or alpha' has optimal value for each point. 

From Fig3, we see nearly 2-dB increment is given on 
security length both for two states protocol and three 
states protocol. This result is better than c = 1 MCS. 
We found MCS without three-photon events has higher 
counting rates and lower QBER than MCS (c=l). This 
is the reason why c = 3 MCS has better performance. 

In above discussion, we set c = 1 to cancel two-photon 
events or c = 3 to cancel three-photon events. However, 
we can also set c as some arbitrary positive value, pro- 
vided this value make R rise. And we draw Fig4 in which 
the relation of increment of security distance between c 
is given. From Fig4, we see optimal c is different for 
two-intensity and three intensity cases. For two-intensity 
case, the optimal value is 3.3 and for three-intensity it's 
2.8. 
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FIG. 3: security key rate {R L ) verse fiber length L. Solid 
curves: R L with 2-intensity and 3-intensity decoy QKD based 
on coherent state. Dashed curves: R L with 2-intensity and 
3-intensity MCS decoy QKD. 



IV. CONCLUSION 

According to above discussion, we see that: thanked 
to MCS's fewer multi-photon events probability, decoy 
state with MCS source can indeed provide QKD service 
of higher key bit rate and longer distance than before. 
We found about 2-dB increment of security distance is 
acquired. Generating this kind of MCS laser pulses isn't 
difficult for today's Lab. We expect that our MCS decoy 
QKD scheme could be implemented earlier. 

The authors thank Prof.Qing-Yu Cai for his 
helpful advice. This work was supported by 
National Fundamental Research Program of China 
(2006CB921900), National Natural Science Foundation 
of China (60537020,60621064) and the Innovation Funds 
of Chinese Academy of Sciences. To whom correspon- 
dence should be addressed, Email: zfhan@ustc.edu.cn. 



[1] C. H. Bennett, G. Brassard, Proceedings of IEEE Inter- 
national Conference on Computers, Systems, and Signal 
Processing, (IEEE, 1984), pp. 175-179. 
[2] A. K. Ekert, Phys. Rev. Lett. 67 661 (1991) 
[3] N. Gisin, Grgoire Ribordy, W. Tittel, and H. Zbinden 

Rev. Mod.Phys. 74, 145 (2002) 
[4] M. Bourennane et al., Opt. Express 4, 383 (1999) 
[5] D. Stucki et al., New. J. Physics, 4, 41, (2002) 
[6] H. Kosaka et al., Electron. Lett. 39, 1199 (2003) 
[7] C. Gobby, Z.L. Yuan, and A.J. Shields, Appl. Phys. Lett. 

84, 3762 (2004); 
[8] X.-F. Mo, B. Zhu, Z.-F. Han, Y.-Z. Gui, G.-C. Guo Op- 
tics Letters, Vol. 30, Issue 19, pp. 2632-2634 (October 
2005) 

[9] B. Huttner, N. Imoto, N. Gisin, and T. Mor, Phys. Rev. 

A 51, 1863 (1995); 
[10] G. Brassard, N. Lutkenhaus, T. Mor, and B. C. Sanders, 

Phys. Rev. Lett. 85, 1330 (2000). 
[11] N. Lutkenhaus, Phys. Rev. A 61, 052304 (2000). 
[12] W.-Y. Hwang, Phys. Rev. Lett. 91, 057901 (2003). 
[13] H.-K. Lo, X. Ma, and K. Chen, Phys. Rev. Lett. 94, 

230504 (2005). 
[14] X.-B. Wang, Phys. Rev. Lett. 94, 230503 (2005); 
[15] X. Ma et al., Phys. Rev. A 72, 012326 (2005). 
[16] Y. Zhao, B. Qi, X. Ma, H.-K. Lo, and L. Qian Phys. Rev. 

Lett. 96, 070502 (2006) 
[17] Yi Zhao, Bing Qi, X.-F. Ma, H.-K. Lo, Li Qian Proceed- 
ings of IEEE International Symposium on Information 

Theory 2006, pp. 2094-2098 
[18] C.-Z. Peng, J. Zhang, D. Yang, W.-B. Gao, H.-X. Ma, H. 

Yin, H.-P. Zeng, T. Yang, X.-B. Wang, and J.-W. Pan 

Phys. Rev. Lett. 98, 010505 (2007) 
[19] D. Rosenberg, J. W. Harrington, P. R. Rice, et al., Phys. 

Rev. Lett. 98, 010503 (2007) 
[20] Z. L. Yuan, A. W. Sharpe, and A. J. Shields Appl. Phys. 

Lett. 90 011118 (2007). 
[21] Tobias Schmitt-Manderbach et al. Phys. Rev. Lett. 98, 

010504 (2007) 



[22] Z.-Q. Yin, Z.-F. Han, Wei Chen, F.-X. Xu, Q.-L. Wu, 

G.-C. Guo quant-ph/0704.2941 (2007) 

[23] X.-B. Wang, Phys. Rev. A 72, 012322 (2005) 

[24] J.-B. Li, and X.-M. Fang, [arXiv:quant-ph/0509077 

(2005) 

[25] Qing-yu Cai, and Yong-gang Tan Phys. Rev. A. 73, 
032305 (2006) 

[26] Tomoyuki Horikiri and Takayoshi Kobayashi Phys. Rev. 

A 73, 032331 (2006) 
[27] Qin Wang, X.-B. Wang, and G.-C. Guo Phys. Rev. A 75, 

012312 (2007) 

[28] Y.-J. Lu and Z.-Y. Ou, Phys. Rev. A 71, 032315 (2005) 
[29] Y.-J. Lu and Z.-Y. Ou, Phys. Rev. Lett 88, 023601 (2002) 



12 -, 




4-| , 1 , 1 , 1 , 1 , r 

1 2 3 4 5 6 

c 



FIG. 4: increment of security distance (AL) verse c. Solid 
curve: for the 2-intensity case. Dotted curve: for the 3- 
intensity case. And each point has optimal v and v' . 



